From b3e76102706597f8d59986fa48609a2a1373d67c Mon Sep 17 00:00:00 2001 From: Dan Walsh Date: Thu, 7 Oct 2010 09:31:35 -0400 Subject: [PATCH] Allow smbd_t sys_admin capability so samba can change quota on users. --- policy/modules/services/samba.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/modules/services/samba.te b/policy/modules/services/samba.te index 8e36be0c..6e627d6f 100644 --- a/policy/modules/services/samba.te +++ b/policy/modules/services/samba.te @@ -227,7 +227,7 @@ optional_policy(` # # smbd Local policy # -allow smbd_t self:capability { chown fowner kill setgid setuid sys_nice sys_resource lease dac_override dac_read_search }; +allow smbd_t self:capability { chown fowner kill setgid setuid sys_nice sys_admin sys_resource lease dac_override dac_read_search }; dontaudit smbd_t self:capability sys_tty_config; allow smbd_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap }; allow smbd_t self:process setrlimit;